Twisted: Unauthenticated Remote Denial Of Service In The Twisted IRC Server Via An Unbounded Line Buffer

Summary An unbounded-buffer vulnerability CWE-770 in the Twisted words IRC server lets any unauthenticated remote client exhaust server memory. "twisted.words.protocols.irc.IRC.dataReceived" appends every received byte to a per-connection buffer and only removes data at a line feed, with no maxim...